Update helm chart to provide Che Server TLS secret data for propagation

Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
eclipse-che · Jul 25, 2019 · 7605ab6 · 7605ab6
1 parent 760e882
commit 7605ab6
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/deploy/kubernetes/helm/che/templates/deployment.yaml b/deploy/kubernetes/helm/che/templates/deployment.yaml
@@ -80,6 +80,24 @@ spec:
               name: self-signed-certificate
               optional: false
         {{- end }}
+        # If workspaces are created in different namespace than Che Server's one
+        # then configure Che Server to propagate TLS secret to workspaces' namespaces
+        {{- if .Values.global.tls.enabled }}
+        {{- if ne .Values.global.cheNamespace .Values.global.cheWorkspacesNamespace }}
+        - name: "CHE_INFRA_KUBERNETES_TLS__CERT"
+          valueFrom:
+            secretKeyRef:
+              key: tls.crt
+              name: {{ .Values.global.tls.secretName  }}
+              optional: false
+        - name: "CHE_INFRA_KUBERNETES_TLS__KEY"
+          valueFrom:
+            secretKeyRef:
+              key: tls.crt
+              name: {{ .Values.global.tls.secretName  }}
+              optional: false
+        {{- end }}
+        {{- end }}
         image: {{ .Values.cheImage }}
         imagePullPolicy: {{ .Values.cheImagePullPolicy }}
         securityContext: